CVE-2005-2023

The sendpinentryenvironment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail...

CVE-2005-2023

Technical details about CVE-2005-2023 are not publicly provided in the supplied documents; monitor for updates.

CVE-2005-2023

The sendpinentryenvironment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail...

CVE-2005-2023

The sendpinentryenvironment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail...

CVE-2005-2023

The sendpinentryenvironment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail...

CVE-2005-1797

The design of Advanced Encryption Standard AES, aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations...

CVE-2005-1797

The design of Advanced Encryption Standard AES, aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations...

[SECURITY] [DSA 726-1] New oops packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 726-1 [email protected] http://www.debian.org/security/ Martin Schulze May 20th, 2005 http://www.debian.org/security/faq -...

[NT] GlobalScape Secure FTP Server Arbitrary Command Overflow ( Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-0239

viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacters in the cert parameter...

kernel security update

CentOS Errata and Security Advisory CESA-2005:293 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CVE-2001-1463

The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password OTP authentication is enabled, which allows remote attackers to sniff passwords...

MS Jet Database (msjet40.dll) Reverse Shell Exploit

Exploit for unknown platform in category local exploits =================================================== MS Jet Database msjet40.dll Reverse Shell Exploit =================================================== See-security Technologies ltd. http://www.see-security.com Microsoft Jet msjet40.dll...

Security Flaw with Digital signatures in Microsoft Outlook

On 10/21/2004 the following vulnerability was reported to Microsoft: Security Flaw with Digital signatures in Microsoft Outlook - Emails in Microsoft Outlook digitally signed with S/MIME using either a commercial personal certificate like Verisign or using a certificate issued by MS Certificate...

Smail-3 < 3.2.0.121 Multiple Vulnerabilities

According to its banner, the remote host is running as its mail server S-mail version 3.2.0.120 or older. Such versions contain various vulnerabilities that may allow an unauthenticated attacker execute arbitrary code on the remote host by exploiting a heap overflow by sending a malformed argumen...

NotifyLink contains multiple SQL injection vulnerabilities

Overview There are multiple vulnerabilities in NotifyLink that allow unauthenticated remote users to view or modify the contents of the NotifyLink SQL database. Possible modifications include the addition of unauthorized user and administrator accounts. Description Notify Technology NotifyLink...

SquirrelMail S/MIME Plug-in Remote Command Execution

The S/MIME plugin for SquirrelMail installed on the remote host does not sanitize the 'cert' parameter used by the 'viewcert.php' script. An authenticated user can exploit this flaw to execute system commands remotely in the context of the web server. %NASLMINLEVEL 70300 C Tenable Network Securit...

SquirrelMail vulnerable to command injection because of flawed input checking in S/MIME plug-in

Overview SquirrelMail contains a flaw in its S/MIME plug-in certificate handling routines which may allow arbitrary code to be remotely executed. Description From the SquirrelMail web page:SquirrelMail is a standards-based webmail package written in PHP4. It includes built-in pure PHP support for...

iDEFENSE Security Advisory 02.07.05: SquirrelMail S/MIME Plugin Command Injection Vulnerability

SquirrelMail S/MIME Plugin Command Injection Vulnerability iDEFENSE Security Advisory 02.07.05 www.idefense.com/application/poi/display?id=191&type=vulnerabilities February 07, 2005 I. BACKGROUND Squirrelmail S/MIME plugin enables the viewing of S/MIME-signed messages of the MIME "multipart/signe...